$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7c406957-79fc-3eb9-96a2-0df08e0960df.roa File: 7c406957-79fc-3eb9-96a2-0df08e0960df.roa (raw, json) Hash identifier: mxFHeTzfYygXzA/4q/nd/328SGg+rJVgd7W2WZB589s= Subject key identifier: B1:3F:10:BE:39:87:99:A8:15:66:52:ED:F5:5D:25:01:92:30:F3:CA Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584D667A53E7F2CFFE71E5633E00 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7c406957-79fc-3eb9-96a2-0df08e0960df.roa Signing time: Sun 05 Apr 2026 01:00:24 +0000 ROA not before: Sun 05 Apr 2026 01:00:24 +0000 ROA not after: Sat 04 Jul 2026 01:00:24 +0000 asID: 834 IP address blocks: 72.244.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:66:7a:53:e7:f2:cf:fe:71:e5:63:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Apr 5 01:00:24 2026 GMT Not After : Jul 4 01:00:24 2026 GMT Subject: CN=29e51d25-1ce2-4d80-91a3-a5edf2a5f6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:08:68:ce:b2:05:c3:7b:57:ff:5c:fd:63:d6: 61:06:1b:e7:3c:90:de:bc:c3:57:03:af:1d:b4:60: 46:2f:2a:d1:c3:91:82:ee:37:5b:51:d4:c9:a1:be: 94:45:f7:18:85:c1:28:94:37:b9:68:1d:ec:d5:8a: a0:cb:ea:40:32:be:16:31:4a:5e:a6:73:05:20:a0: 12:15:02:e8:c6:83:d4:1a:ab:4c:86:66:1b:dd:1d: f5:9e:ed:8c:60:6c:bc:eb:94:26:9f:38:fa:d4:16: 7c:7d:30:ae:02:86:16:74:55:40:41:e6:91:79:59: 8d:a0:7c:e4:e3:85:b6:39:9a:0d:26:b8:7a:05:60: 1c:81:34:24:a3:df:f1:f0:ae:91:15:c1:25:a4:6f: c6:dd:53:dd:b5:9c:07:ee:6e:67:2d:38:dc:2f:4b: 69:5b:11:c3:34:d3:da:bd:db:00:b9:d2:29:4f:6d: 59:dc:e5:ea:33:3d:04:28:3c:fe:22:42:a5:c6:f8: c3:10:3d:57:53:7b:ed:77:40:94:32:a6:22:fc:62: 37:5f:14:d1:27:a9:4a:0b:10:01:6f:64:7d:2d:9b: 32:d2:7b:60:c7:c7:79:ff:7a:15:bf:48:1d:62:18: 37:8c:fc:9d:af:0a:b3:f4:7b:86:7e:3a:76:63:8a: dd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:3F:10:BE:39:87:99:A8:15:66:52:ED:F5:5D:25:01:92:30:F3:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/7c406957-79fc-3eb9-96a2-0df08e0960df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 72.244.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:b3:8a:d3:86:aa:6c:20:f5:9a:02:91:31:2e:a0:f5:b5:7a: 48:b3:c0:c8:20:3c:17:9d:23:97:37:bd:53:20:1e:c4:27:54: 67:a7:ff:bb:50:b1:1c:99:98:13:85:4e:fb:d3:af:2c:59:83: 4c:ed:d0:fb:7b:c0:dd:52:46:f9:80:6b:0e:02:21:b3:9d:b6: 7f:46:d7:c1:9d:2e:6e:2c:40:43:dd:3c:37:25:0a:47:25:2d: 98:2e:32:33:d9:c5:fa:26:e4:10:6e:29:7c:88:dd:8d:b3:c1: 56:f0:75:c1:0d:2b:f2:dc:7c:1f:e7:4a:bd:ab:67:5a:83:a3: dc:84:7c:2e:74:e8:24:78:e1:f0:e1:c4:b7:c1:11:54:22:5c: 3f:45:5b:a7:84:00:ea:20:17:61:e2:ae:e2:b5:df:15:da:70: a3:eb:e5:1f:48:12:13:83:ff:43:95:39:09:95:00:59:e1:c2: 9f:bd:2a:15:af:0e:c8:09:20:f1:bb:59:00:2e:40:49:91:f2: 5a:bc:c0:dd:b1:e5:85:0f:30:30:0f:48:6a:08:40:59:7a:2d: 51:fc:8e:7f:00:28:4c:4e:07:e0:1b:9c:c0:e2:db:05:6e:c2: 9b:bc:b5:97:8b:90:f5:1b:68:a8:ca:80:19:fc:71:e6:01:6a: af:9a:e8:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1melPn8s/+ceVjPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk MjllNTFkMjUtMWNlMi00ZDgwLTkxYTMtYTVlZGYyYTVmNmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQhozrIFw3tX/1z9Y9ZhBhvnPJDevMNXA68d tGBGLyrRw5GC7jdbUdTJob6URfcYhcEolDe5aB3s1Yqgy+pAMr4WMUpepnMFIKAS FQLoxoPUGqtMhmYb3R31nu2MYGy865Qmnzj61BZ8fTCuAoYWdFVAQeaReVmNoHzk 44W2OZoNJrh6BWAcgTQko9/x8K6RFcElpG/G3VPdtZwH7m5nLTjcL0tpWxHDNNPa vdsAudIpT21Z3OXqMz0EKDz+IkKlxvjDED1XU3vtd0CUMqYi/GI3XxTRJ6lKCxAB b2R9LZsy0ntgx8d5/3oVv0gdYhg3jPydrwqz9HuGfjp2Y4rd3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLE/EL45h5moFWZS7fVdJQGSMPPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvN2M0MDY5NTctNzlmYy0z ZWI5LTk2YTItMGRmMDhlMDk2MGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSPQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOzitOGqmwg9ZoCkTEuoPW1ekizwMggPBedI5c3vVMgHsQnVGen/7tQ sRyZmBOFTvvTryxZg0zt0Pt7wN1SRvmAaw4CIbOdtn9G18GdLm4sQEPdPDclCkcl LZguMjPZxfom5BBuKXyI3Y2zwVbwdcENK/LcfB/nSr2rZ1qDo9yEfC506CR44fDh xLfBEVQiXD9FW6eEAOogF2HiruK13xXacKPr5R9IEhOD/0OVOQmVAFnhwp+9KhWv DsgJIPG7WQAuQEmR8lq8wN2x5YUPMDAPSGoIQFl6LVH8jn8AKExOB+AbnMDi2wVu wpu8tZeLkPUbaKjKgBn8ceYBaq+a6HU= -----END CERTIFICATE-----Generated at Fri Apr 10 23:15:55 2026 by rpki-client